Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/42c96ed9-8855-37c4-8b0e-8f1a10cf6e31.roa
File:                     42c96ed9-8855-37c4-8b0e-8f1a10cf6e31.roa (raw, json)
Hash identifier:          RQLdgcBuDkKlZ0VpL3FtQpz8WqTqwpj1LVNerIRhfOk=
Subject key identifier:   B2:13:82:D5:B5:A9:1B:05:88:69:F4:90:0F:6F:FA:F2:23:A0:75:AA
Certificate issuer:       /CN=23658315-b56f-46db-89d2-184000d7f7e1
Certificate serial:       010D0C9F4328584B821CBD784664CA0F1DEABC00
Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/42c96ed9-8855-37c4-8b0e-8f1a10cf6e31.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     14007
IP address blocks:        192.149.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:bd:78:46:64:ca:0f:1d:ea:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=d733b924-0872-489e-ad89-9a4893c47679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:4a:5f:9f:7d:84:e4:98:9f:46:15:d9:84:
                    20:ce:46:df:5f:de:65:6e:3c:f3:2f:2e:0f:57:e6:
                    13:19:4e:9b:b0:72:fb:f4:a2:23:76:f5:51:0d:bf:
                    7b:cb:84:5a:e2:cb:04:99:3c:ea:3d:f9:45:f2:9b:
                    9d:c3:6f:fb:16:c7:4a:2b:fa:fc:4f:2b:b2:b8:20:
                    90:db:45:9a:4c:06:6b:84:d4:90:03:1b:2c:eb:ff:
                    82:46:ad:7f:60:bf:7d:7f:1f:f9:1f:3e:d3:f8:e2:
                    0e:07:5e:af:06:29:93:4d:d9:f1:fc:26:73:20:a7:
                    8c:dc:a1:77:cb:10:ff:ba:2e:7a:8c:48:bc:60:51:
                    bc:d7:f6:a6:da:3b:3b:9e:2e:70:c2:c5:ea:55:32:
                    aa:76:16:65:a8:b1:9b:a0:91:aa:99:0c:bb:cc:b1:
                    4a:1c:20:6f:9b:38:4a:2e:db:e5:b4:9b:b6:0f:a8:
                    74:bf:05:cf:a8:5d:07:8f:73:12:88:ce:fb:4e:45:
                    61:5f:6b:67:1c:a9:30:25:27:7a:0c:0d:b6:bb:4a:
                    e6:95:6e:ac:2d:50:c4:d2:0e:9e:b9:13:b7:92:3e:
                    78:07:d5:f9:4a:5d:a7:ae:81:14:c6:7e:f1:84:8b:
                    63:ce:d0:f7:66:92:2b:e0:69:99:fe:9a:0e:f6:8b:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:13:82:D5:B5:A9:1B:05:88:69:F4:90:0F:6F:FA:F2:23:A0:75:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/42c96ed9-8855-37c4-8b0e-8f1a10cf6e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl

            X509v3 Authority Key Identifier:
                keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fe:e7:75:8a:c7:4f:d0:e3:2d:04:d3:79:a0:63:6a:58:9b:
         c6:ba:6f:9a:7a:9f:ee:2c:ca:db:f3:f8:a2:3d:e4:f5:7f:7c:
         35:d9:15:20:cd:b2:7e:fa:e0:71:f7:36:a0:c0:1f:ae:a6:c2:
         a9:a5:ac:8a:68:07:d8:a6:b6:df:14:fb:da:98:f6:a5:18:07:
         af:3a:fa:db:45:fd:5a:1c:70:be:22:f9:ab:f1:64:34:e1:88:
         0a:52:68:9e:09:4b:65:f5:a7:5f:8c:72:e4:93:a8:e5:18:a5:
         c5:7e:da:b6:c7:7f:b5:6a:f7:e3:b1:78:b7:c9:63:40:85:0a:
         ee:69:7c:39:99:09:ce:38:91:41:59:dc:2b:23:6b:0f:10:15:
         23:c1:5c:a0:b6:01:f4:6b:9f:63:c2:ec:88:ff:ff:68:f2:93:
         e1:14:d3:f9:5a:d3:e3:ae:bd:35:1a:a0:f9:02:02:46:39:26:
         3c:29:32:91:b9:f5:97:b2:6e:f9:13:ad:a9:34:92:b7:8d:30:
         fb:42:ff:69:56:33:c1:c6:4a:cb:2c:b4:ca:05:c2:c8:3e:e6:
         8e:12:b5:b2:f1:bb:a7:dd:8f:93:71:b2:6b:bb:02:13:2e:a7:
         17:b0:f3:d5:1a:49:c6:93:bb:0b:85:47:cf:00:31:e5:17:28:
         25:b9:d7:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHL14RmTKDx3qvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjM2NTgzMTUtYjU2Zi00NmRiLTg5ZDItMTg0MDAwZDdm
N2UxMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ZDczM2I5MjQtMDg3Mi00ODllLWFkODktOWE0ODkzYzQ3Njc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3hKX599hOSYn0YV2YQgzkbfX95lbjzzLy4P
V+YTGU6bsHL79KIjdvVRDb97y4Ra4ssEmTzqPflF8pudw2/7FsdKK/r8TyuyuCCQ
20WaTAZrhNSQAxss6/+CRq1/YL99fx/5Hz7T+OIOB16vBimTTdnx/CZzIKeM3KF3
yxD/ui56jEi8YFG81/am2js7ni5wwsXqVTKqdhZlqLGboJGqmQy7zLFKHCBvmzhK
LtvltJu2D6h0vwXPqF0Hj3MSiM77TkVhX2tnHKkwJSd6DA22u0rmlW6sLVDE0g6e
uRO3kj54B9X5Sl2nroEUxn7xhItjztD3ZpIr4GmZ/poO9osHjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLITgtW1qRsFiGn0kA9v+vIjoHWqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1
ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQwMDBkN2Y3ZTEvNDJjOTZlZDktODg1NS0z
N2M0LThiMGUtOGYxYTEwY2Y2ZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjM2NTgzMTUtYjU2Zi00NmRiLTg5
ZDItMTg0MDAwZDdmN2UxLzIzNjU4MzE1LWI1NmYtNDZkYi04OWQyLTE4NDAwMGQ3
ZjdlMS5jcmwwHwYDVR0jBBgwFoAU5YfMbY7t14LlHY1OWXdrNmM0d3owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQw
MDBkN2Y3ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJVoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABf+53WKx0/Q4y0E03mgY2pYm8a6b5p6n+4sytvz+KI95PV/fDXZFSDN
sn764HH3NqDAH66mwqmlrIpoB9imtt8U+9qY9qUYB686+ttF/VoccL4i+avxZDTh
iApSaJ4JS2X1p1+McuSTqOUYpcV+2rbHf7Vq9+OxeLfJY0CFCu5pfDmZCc44kUFZ
3Csjaw8QFSPBXKC2AfRrn2PC7Ij//2jyk+EU0/la0+OuvTUaoPkCAkY5JjwpMpG5
9ZeybvkTrak0kreNMPtC/2lWM8HGSssstMoFwsg+5o4StbLxu6fdj5Nxsmu7AhMu
pxew89UaScaTuwuFR88AMeUXKCW519E=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:41:13 2025 by rpki-client